Error was encountered while checking revocations

[angelsantillana94]

Hi,

After installing cert-checker I have found some errors in the verification of some of my certificates. Some of the errors are as follows:

2021/09/07 06:25:56 [WARNING] error checking revocation via OCSP
time="2021-09-07T06:25:56Z" level=debug msg=" - Found error for host00.domain.tld:9120 : an error was encountered while checking revocations"
time="2021-09-07T06:25:56Z" level=debug msg="Probing: host04.domain.tld:443"
time="2021-09-07T06:25:56Z" level=debug msg="Probing: host04.domain.tld:9020"
2021/09/07 06:25:57 [WARNING] error checking revocation via OCSP
time="2021-09-07T06:25:57Z" level=debug msg=" - Found error for host04.domain.tld:9020 : an error was encountered while checking revocations"
time="2021-09-07T06:25:57Z" level=debug msg="Probing: host04.domain.tld:9120"
2021/09/07 06:25:57 [WARNING] error checking revocation via OCSP
time="2021-09-07T06:25:57Z" level=debug msg=" - Found error for host04.domain.tld:9120 : an error was encountered while checking revocations"
time="2021-09-07T06:25:57Z" level=debug msg="Probing: host05.domain.tld:443"
time="2021-09-07T06:25:57Z" level=debug msg="Probing: host05.domain.tld:9020"
2021/09/07 06:25:57 [WARNING] error checking revocation via OCSP
time="2021-09-07T06:25:57Z" level=debug msg=" - Found error for host05.domain.tld:9020 : an error was encountered while checking revocations"
time="2021-09-07T06:25:57Z" level=debug msg="Probing: host05.domain.tld:9120"
2021/09/07 06:25:58 [WARNING] error checking revocation via OCSP
time="2021-09-07T06:25:58Z" level=debug msg=" - Found error for host05.domain.tld:9120 : an error was encountered while checking revocations"
time="2021-09-07T06:25:58Z" level=debug msg="Probing: host10.domain.tld:443"
time="2021-09-07T06:25:58Z" level=debug msg="Probing: host11.domain.tld:443"
time="2021-09-07T06:25:58Z" level=debug msg="Probing: host12.domain.tld:443"

trying to debug the application, the function that does the OCSP check returns the following: "bad OCSP signature: crypto / rsa: verification error"

Thanks in advance.

[lhotrifork]

What happens if you check the OCSP status with another tool?
For example openssl or this online tool: https://decoder.link/ocsp

[angelsantillana94]

Both tools respond OK to the OCSP request.

[angelsantillana94]

do you have any idea? @lhotrifork
Thanks!